URLhaus Database

You are currently viewing the URLhaus database entry for http://virtual.tecnologicojuanjui.edu.pe/availability/g-34520/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1984272
URL: http://virtual.tecnologicojuanjui.edu.pe/availability/g-34520/?i=1
URL Status:Offline
Host: virtual.tecnologicojuanjui.edu.pe
Date added:2022-01-17 18:42:06 UTC
Last online:2022-01-18 05:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: sugimu_sec
Abuse complaint sent (?): Yes (2022-01-17 18:43:07 UTC to abuse{at}ovh[dot]net)
Takedown time:11 hours, 3 minutes Good (down since 2022-01-18 05:46:46 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-1812126456NOSGLABA_64.xlsmxlsm c376ffe4c231464c947bc77a323936d8eb64d85bcd1ddcd33bcc161dae53ef15n/a Heodo
2022-01-1813293_4059686.xlsmxlsm 42671e33a5cd09da48d20b7a12e9d8c6b5c3e8e397deffd7d721f10e3c26c410n/a Heodo
2022-01-18PSWUH-262.xlsmxlsm 0228ceafa8f9fb29813b9462d9aee85f346c43440aabab248ee3a28283eb4f6fn/a Heodo
2022-01-18JROD_80.xlsmxlsm 976872f868b49d98d5e487b42d9bce61f8b05d610fb794ccacbe1ca4274d71cdn/a Heodo
2022-01-18149931PYXLSK29479297.xlsmxlsm 05e2970a2d23748d20962e6a506d75a8649a4f5c2b7a0dc7723c90680659f0c9n/a Heodo
2022-01-18463064910_318484.xlsmxlsm 954cce122bbc5f2db9b047be265ecb1c8dbbe04b37eaf5b2f738423610df2d4an/a Heodo
2022-01-1898952YUYALDZ30.xlsmxlsm 72c3f7215a023270169a1f1a078c7df9714bdb4ab297fe3bfde6e13fbcb08c68n/a Heodo
2022-01-18CAR_14.xlsmxlsm bca263286c21f2647b4f0885a0848164685ab40aa0d758e94eb8d774d940c69dn/a Heodo
2022-01-18250096840_910700137.xlsmxlsm b977c5112c9836972623051077502437f1a49a9b8c0ae004c54d0a5685f5b974Virustotal results 25.40% Heodo
2022-01-17H46100.xlsmxlsm 053bb9b9096198d542ba99d4aa0148e9af3797c17d2b874f406bf9d35749d809n/a Heodo
2022-01-17CYI_85476459.xlsmxlsm 3205e9241e6f23942fd5b8ff4babdf561cd0022a6d42a800075046bb9e627eb8Virustotal results 23.81% Heodo
2022-01-17998_5340346.xlsmxlsm 47c80c975818ab9bd09449d2130bcfb94eeab3b0aaaa784f5c2b56cc3d32c796Virustotal results 25.40% Heodo
2022-01-1785776645_5814.xlsmxlsm f4bb1e4f32c5444db3de6d023a3e27ecd0b948e8b13b1d54d7c725ff63dbd7daVirustotal results 22.22% Heodo
2022-01-176308023961.xlsmxlsm 1227b6464953ca3a4307804a94c248736f40446a42121d3e0ceb52fc63629f8an/a Heodo
2022-01-17vakz21.xlsmxlsm d617e18915823ed787d6a6d05689a574c7286b6e0c1dccfda44870670679f7b5Virustotal results 27.42% Heodo
2022-01-17001019850048961.xlsmxlsm 39c543e8e8c15d86ce6846357dfb9bc121ec589e7541240515953a672cf960c1n/a Heodo
2022-01-17GC-7.xlsmxlsm e65056c46dd67d975b08e3c95022e40789f0ec764f0375df83d1534b34c14670Virustotal results 23.81% Heodo
2022-01-17W_05143674.xlsmxlsm 240eea341736e3d6091948435139358fd0b6b3e508709296bcf0d1a870596a52Virustotal results 23.33% Heodo
2022-01-176069_19923.xlsmxlsm b7fc32e00135f65946eecbf56d3c8bd1353d1c09962ee449e8e79bf761df406bn/a Heodo
2022-01-17258009_82695377.xlsmxlsm bbbff967ddc10adc5d265018bb2f765c96b4d3c95e15d4c209140ede5f0993f9n/a Heodo
2022-01-171546_55.xlsmxlsm 0f72eed22b58f5d63fbba18836777f39f79e300d1d00e4890b229d8140f09ac8Virustotal results 22.58% Heodo
2022-01-17G_03.xlsmxlsm 677edcb3338b40c05e2c3eec629faeb2078019b07669765c7bf2a1343aab5a92n/a Heodo
2022-01-17519IUOI_55602.xlsmxlsm 1233717961aafe39a8460a60e274f121faa33e31fb60051e6300f4bf57adf8ban/a Heodo